Manuels d'utilisation pour ZyXEL Communications P-2602H

Table des matières

• User’s Guide

  1
  • About This User's Guide

    3
  • Document Conventions

    4
  • Safety Warnings

    6
  • Contents Overview

    9
  • Table of Contents

    11
  • List of Figures

    23
  • List of Tables

    31
• Introduction

  37
  • Introducing the ZyXEL Device

    39
    • 1.1 Overview

      39
    • 1.2 Ways to Manage the ZyXEL Device

      40
    • 1.3 Good Habits for Managing the ZyXEL Device

      40
    • 1.4 Applications for the ZyXEL Device

      41
      • 1.4.1 Internet Access

        41
      • 1.4.2 Making Calls via Internet Telephony Service Provider

        41
      • 1.4.3 Make Peer-to-peer Calls

        42
      • 1.4.4 Firewall for Secure Broadband Internet Access

        42
      • 1.4.5 LAN to LAN Application

        43
    • 1.5 LEDs

      44
    • 1.6 The RESET Button

      45
      • 1.6.1 Using The Reset Button

        45
  • Introducing the Web Configurator

    47
    • 2.1 Web Configurator Overview

      47
      • 2.1.1 Accessing the Web Configurator

        47
    • 2.2 Web Configurator Main Screen

      50
      • 2.2.1 Title Bar

        50
      • 2.2.2 Navigation Panel

        51
      • 2.2.3 Main Window

        53
      • 2.2.4 Status Bar

        53
• Wizard

  55
  • Internet and Wireless Setup Wizard

    57
    • 3.1 Introduction

      57
    • 3.2 Internet Access Wizard Setup

      57
      • 3.2.1 Manual Configuration

        60
    • 3.3 Wireless Connection Wizard Setup

      65
      • 3.3.1 Manually Assign a WPA key

        68
      • 3.3.2 Manually Assign a WEP Key

        68
  • VoIP Wizard And Example

    71
    • 4.1 Introduction

      71
    • 4.2 VoIP Wizard Setup

      71
  • Bandwidth Management Wizard

    77
    • 5.1 Introduction

      77
    • 5.2 Bandwidth Management Wizard Setup

      77
• Advanced

  81
  • Status Screens

    83
    • 6.1 Status Screen

      83
    • 6.2 Any IP Table

      86
    • 6.3 WLAN Status (“W” models only)

      87
    • 6.4 Packet Statistics

      87
    • 6.5 VoIP Statistics

      89
  • WAN Setup

    93
    • 7.1 WAN Overview

      93
      • 7.1.1 Encapsulation

        93
      • 7.1.2 Multiplexing

        94
      • 7.1.3 VPI and VCI

        94
      • 7.1.4 IP Address Assignment

        94
      • 7.1.5 Nailed-Up Connection (PPP)

        95
      • 7.1.6 NAT

        95
    • 7.2 Metric

      95
    • 7.3 Traffic Shaping

      96
      • 7.3.1 ATM Traffic Classes

        97
    • 7.4 Zero Configuration Internet Access

      97
    • 7.5 Internet Access Setup

      98
      • 7.5.1 Advanced Internet Access Setup

        100
    • 7.6 WAN More Connections

      101
    • 7.7 Traffic Redirect

      102
    • 7.8 WAN Backup Setup

      103
  • LAN Setup

    105
    • 8.1 LAN Overview

      105
      • 8.1.1 LANs, WANs and the ZyXEL Device

        105
      • 8.1.2 DHCP Setup

        106
    • 8.2 DNS Server Addresses

      106
    • 8.3 LAN TCP/IP

      106
      • 8.3.1 IP Address and Subnet Mask

        107
      • 8.3.2 RIP Setup

        108
      • 8.3.3 Multicast

        108
      • 8.3.4 Any IP

        109
    • 8.4 Configuring LAN IP

      110
      • 8.4.1 Configuring Advanced LAN Setup

        111
    • 8.5 DHCP Setup

      112
    • 8.6 LAN Client List

      113
    • 8.7 LAN IP Alias

      114
  • Wireless LAN

    117
    • 9.1 Wireless Network Overview

      117
    • 9.2 Wireless Security Overview

      118
      • 9.2.1 SSID

        118
      • 9.2.2 MAC Address Filter

        118
      • 9.2.3 User Authentication

        118
      • 9.2.4 Encryption

        119
      • 9.2.5 One-Touch Intelligent Security Technology (OTIST)

        120
    • 9.3 Wireless Performance Overview

      120
      • 9.3.1 Quality of Service (QoS)

        120
    • 9.4 Additional Wireless Terms

      120
    • 9.5 General WLAN Screen

      121
      • 9.5.1 No Security

        122
      • 9.5.2 WEP Encryption Screen

        123
      • 9.5.3 WPA(2)-PSK

        124
      • 9.5.4 WPA(2) Authentication Screen

        125
      • 9.5.5 Wireless LAN Advanced Setup

        127
    • 9.6 OTIST Screen

      128
      • 9.6.1 Notes on OTIST

        130
    • 9.7 MAC Filter

      131
    • 9.8 QoS Screen

      133
      • 9.8.1 Application Priority Configuration

        134
  • Network Address Translation (NAT) Screens

    137
    • 10.1 NAT General Overview

      137
      • 10.1.1 NAT Definitions

        137
      • 10.1.2 What NAT Does

        138
      • 10.1.3 How NAT Works

        138
      • 10.1.4 NAT Application

        138
      • 10.1.5 NAT Mapping Types

        139
    • 10.2 SUA (Single User Account) Versus NAT

      140
    • 10.3 NAT General Setup

      140
    • 10.4 Port Forwarding

      141
      • 10.4.1 Default Server IP Address

        142
      • 10.4.2 Port Forwarding: Services and Port Numbers

        142
      • 10.4.3 Configuring Servers Behind Port Forwarding (Example)

        142
    • 10.5 Configuring Port Forwarding

      143
      • 10.5.1 Port Forwarding Rule Edit

        144
    • 10.6 Address Mapping

      145
      • 10.6.1 Address Mapping Rule Edit

        146
      • 10.6.2 SIP ALG

        148
  • Voice

    149
    • 11.1 Introduction to VoIP

      149
    • 11.2 SIP

      149
      • 11.2.1 SIP Identities

        149
      • 11.2.2 SIP Call Progression

        150
      • 11.2.3 SIP Servers

        150
      • 11.2.4 RTP

        152
      • 11.2.5 Pulse Code Modulation

        152
      • 11.2.6 Voice Coding

        152
      • 11.2.7 PSTN Call Setup Signaling

        153
      • 11.2.8 MWI (Message Waiting Indication)

        153
      • 11.2.9 Custom Tones (IVR)

        153
    • 11.3 Quality of Service (QoS)

      154
      • 11.3.1 Type of Service (ToS)

        154
      • 11.3.2 DiffServ

        154
      • 11.3.3 VLAN Tagging

        155
    • 11.4 SIP Settings Screen

      155
    • 11.5 Advanced SIP Setup Screen

      156
    • 11.6 SIP QoS Screen

      160
    • 11.7 Phone

      160
      • 11.7.1 Voice Activity Detection/Silence Suppression

        160
      • 11.7.2 Comfort Noise Generation

        161
      • 11.7.3 Echo Cancellation

        161
    • 11.8 Analog Phone Screen

      161
    • 11.9 Advanced Analog Phone Setup Screen

      162
    • 11.10 Common Phone Settings Screen

      163
    • 11.11 Phone Services Overview

      164
      • 11.11.1 The Flash Key

        165
      • 11.11.2 Europe Type Supplementary Phone Services

        165
      • 11.11.3 USA Type Supplementary Services

        166
    • 11.12 Phone Region Screen

      168
    • 11.13 Speed Dial

      168
    • 11.14 Incoming Call Policy Screen

      170
    • 11.15 Distinctive Ring Screen

      172
    • 11.16 PSTN Line (“L” models only)

      173
    • 11.17 PSTN Line Screen (“L” models only)

      174
  • VoIP Trunking

    175
    • 12.1 VoIP Trunking Overview

      175
    • 12.2 VoIP Trunking and Security

      175
      • 12.2.1 Auto Attendant and Authentication

        175
      • 12.2.2 Peer Call Authentication

        176
    • 12.3 Call Rules

      177
    • 12.4 VoIP Trunking Scenarios

      177
      • 12.4.1 VoIP Phone To PSTN Phone

        177
      • 12.4.2 PSTN Phone To VoIP Phone

        177
      • 12.4.3 PSTN Phone To PSTN Phone via VoIP

        178
    • 12.5 Trunking General Screen

      178
    • 12.6 Trunking Peer Call Screen

      179
    • 12.7 Trunking Call Rule Screen

      181
    • 12.8 VoIP Trunking Example: VoIP to PSTN

      183
      • 12.8.1 Background Information

        183
      • 12.8.2 Configuration Details: Outgoing

        183
      • 12.8.3 Configuration Details: Incoming

        184
      • 12.8.4 Call Progression

        185
    • 12.9 VoIP Trunking Example: PSTN to PSTN via VoIP

      185
      • 12.9.1 Background Information

        186
      • 12.9.2 Configuration Details: Outgoing

        186
      • 12.9.3 Configuration Details: Incoming

        188
      • 12.9.4 Call Progression

        188
  • Phone Usage

    191
    • 13.1 Dialing a Telephone Number

      191
    • 13.2 Using Speed Dial to Dial a Telephone Number

      191
    • 13.3 Internal Calls

      191
    • 13.4 Using Call Park and Pickup

      191
    • 13.5 Checking the ZyXEL Device’s IP Address

      192
    • 13.6 Auto Provisioning and Auto Firmware Upgrade

      192
    • 13.7 Phone Functions Summary

      192
  • Firewalls

    195
    • 14.1 Firewall Overview

      195
    • 14.2 Types of Firewalls

      195
      • 14.2.1 Packet Filtering Firewalls

        195
      • 14.2.2 Application-level Firewalls

        196
      • 14.2.3 Stateful Inspection Firewalls

        196
    • 14.3 Introduction to ZyXEL’s Firewall

      196
      • 14.3.1 Denial of Service Attacks

        197
    • 14.4 Denial of Service

      197
      • 14.4.1 Basics

        197
      • 14.4.2 Types of DoS Attacks

        198
    • 14.5 Stateful Inspection

      200
      • 14.5.1 Stateful Inspection Process

        201
      • 14.5.2 Stateful Inspection on Your ZyXEL Device

        202
      • 14.5.3 TCP Security

        202
      • 14.5.4 UDP/ICMP Security

        203
      • 14.5.5 Upper Layer Protocols

        203
    • 14.6 Guidelines for Enhancing Security with Your Firewall

      204
      • 14.6.1 Security In General

        204
    • 14.7 Packet Filtering Vs Firewall

      205
      • 14.7.1 Packet Filtering:

        205
      • 14.7.2 Firewall

        205
  • Firewall Configuration

    207
    • 15.1 Access Methods

      207
    • 15.2 General Firewall Policy Overview

      207
    • 15.3 Rule Logic Overview

      208
      • 15.3.1 Rule Checklist

        208
      • 15.3.2 Security Ramifications

        208
      • 15.3.3 Key Fields For Configuring Rules

        209
    • 15.4 Connection Direction

      209
      • 15.4.1 LAN to WAN Rules

        210
      • 15.4.2 Alerts

        210
    • 15.5 General Firewall Policy

      210
    • 15.6 Firewall Rules Summary

      211
      • 15.6.1 Configuring Firewall Rules

        213
      • 15.6.2 Customized Services

        216
      • 15.6.3 Configuring A Customized Service

        216
    • 15.7 Example Firewall Rule

      217
    • 15.8 DoS Thresholds

      221
      • 15.8.1 Threshold Values

        221
      • 15.8.2 Half-Open Sessions

        222
      • 15.8.3 Configuring Firewall Thresholds

        222
    • 15.9 Firewall Commands

      224
  • Content Filtering

    227
    • 16.1 Content Filtering Overview

      227
    • 16.2 Configuring Keyword Blocking

      227
    • 16.3 Configuring the Schedule

      228
    • 16.4 Configuring Trusted Computers

      229
  • Introduction to IPSec

    231
    • 17.1 VPN Overview

      231
      • 17.1.1 IPSec

        231
      • 17.1.2 Security Association

        231
      • 17.1.3 Other Terminology

        231
      • 17.1.4 VPN Applications

        232
    • 17.2 IPSec Architecture

      232
      • 17.2.1 IPSec Algorithms

        233
      • 17.2.2 Key Management

        233
    • 17.3 Encapsulation

      233
      • 17.3.1 Transport Mode

        234
      • 17.3.2 Tunnel Mode

        234
    • 17.4 IPSec and NAT

      234
  • VPN Screens

    237
    • 18.1 VPN/IPSec Overview

      237
    • 18.2 IPSec Algorithms

      237
      • 18.2.1 AH (Authentication Header) Protocol

        237
      • 18.2.2 ESP (Encapsulating Security Payload) Protocol

        237
    • 18.3 My IP Address

      238
    • 18.4 Secure Gateway Address

      238
      • 18.4.1 Dynamic Secure Gateway Address

        239
    • 18.5 VPN Setup Screen

      239
    • 18.6 Keep Alive

      241
    • 18.7 VPN, NAT, and NAT Traversal

      241
    • 18.8 Remote DNS Server

      242
    • 18.9 ID Type and Content

      243
      • 18.9.1 ID Type and Content Examples

        244
    • 18.10 Pre-Shared Key

      245
    • 18.11 Editing VPN Policies

      245
    • 18.12 IKE Phases

      250
      • 18.12.1 Negotiation Mode

        251
      • 18.12.2 Diffie-Hellman (DH) Key Groups

        251
      • 18.12.3 Perfect Forward Secrecy (PFS)

        251
    • 18.13 Configuring Advanced IKE Settings

      251
    • 18.14 Manual Key Setup

      254
      • 18.14.1 Security Parameter Index (SPI)

        254
    • 18.15 Configuring Manual Key

      254
    • 18.16 Viewing SA Monitor

      257
    • 18.17 Configuring Global Setting

      259
    • 18.18 Telecommuter VPN/IPSec Examples

      259
      • 18.18.1 Telecommuters Sharing One VPN Rule Example

        259
      • 18.18.2 Telecommuters Using Unique VPN Rules Example

        260
    • 18.19 VPN and Remote Management

      262
  • Certificates

    263
    • 19.1 Certificates Overview

      263
      • 19.1.1 Advantages of Certificates

        264
    • 19.2 Self-signed Certificates

      264
    • 19.3 Configuration Summary

      264
    • 19.4 My Certificates

      265
    • 19.5 My Certificate Import

      266
      • 19.5.1 Certificate File Formats

        267
    • 19.6 My Certificate Create

      268
    • 19.7 My Certificate Details

      270
    • 19.8 Trusted CAs

      273
    • 19.9 Trusted CA Import

      275
    • 19.10 Trusted CA Details

      276
    • 19.11 Trusted Remote Hosts

      278
    • 19.12 Verifying a Trusted Remote Host’s Certificate

      280
      • 19.12.1 Trusted Remote Host Certificate Fingerprints

        280
    • 19.13 Trusted Remote Hosts Import

      281
    • 19.14 Trusted Remote Host Certificate Details

      281
    • 19.15 Directory Servers

      284
    • 19.16 Directory Server Add and Edit

      285
  • Static Route

    287
    • 20.1 Static Route

      287
    • 20.2 Configuring Static Route

      287
      • 20.2.1 Static Route Edit

        288
  • Bandwidth Management

    291
    • 21.1 Bandwidth Management Overview

      291
    • 21.2 Application-based Bandwidth Management

      291
    • 21.3 Auto Classifier

      291
    • 21.4 Subnet-based Bandwidth Management

      292
    • 21.5 Application and Subnet-based Bandwidth Management

      293
      • 21.5.1 Bandwidth Management Priorities

        293
    • 21.6 Configuring Bandwidth Management (General)

      293
    • 21.7 Bandwidth Management Rule Setup

      294
      • 21.7.1 Rule Configuration

        295
    • 21.8 Bandwidth Monitor

      297
  • Dynamic DNS Setup

    299
    • 22.1 Dynamic DNS Overview

      299
      • 22.1.1 DYNDNS Wildcard

        299
    • 22.2 Configuring Dynamic DNS

      299
  • Remote Management Configuration

    303
    • 23.1 Remote Management Overview

      303
      • 23.1.1 Remote Management Limitations

        304
      • 23.1.2 Remote Management and NAT

        304
      • 23.1.3 System Timeout

        304
    • 23.2 WWW

      304
    • 23.3 Telnet

      305
    • 23.4 Configuring Telnet

      306
    • 23.5 Configuring FTP

      306
    • 23.6 SNMP

      307
      • 23.6.1 Supported MIBs

        308
      • 23.6.2 SNMP Traps

        309
      • 23.6.3 Configuring SNMP

        309
    • 23.7 Configuring DNS

      310
    • 23.8 Configuring ICMP

      311
  • Universal Plug-and-Play (UPnP)

    313
    • 24.1 Introducing Universal Plug and Play

      313
      • 24.1.1 How do I know if I'm using UPnP?

        313
      • 24.1.2 NAT Traversal

        313
      • 24.1.3 Cautions with UPnP

        313
    • 24.2 UPnP and ZyXEL

      314
      • 24.2.1 Configuring UPnP

        314
    • 24.3 Installing UPnP in Windows Example

      315
    • 24.4 Using UPnP in Windows XP Example

      318
• Maintenance and Troubleshooting

  325
  • System

    327
    • 25.1 General Setup and System Name

      327
      • 25.1.1 General Setup

        327
    • 25.2 Time Setting

      329
  • Logs

    331
    • 26.1 Logs Overview

      331
      • 26.1.1 Alerts and Logs

        331
    • 26.2 Viewing the Logs

      331
    • 26.3 Configuring Log Settings

      332
    • 26.4 SMTP Error Messages

      334
      • 26.4.1 Example E-mail Log

        335
    • 26.5 Log Descriptions

      336
  • Tools

    345
    • 27.1 Introduction

      345
    • 27.2 Filename Conventions

      345
    • 27.3 File Maintenance Over WAN

      346
    • 27.4 Firmware Upgrade Screen

      347
    • 27.5 Backup and Restore

      348
      • 27.5.1 Backup Configuration

        349
      • 27.5.2 Restore Configuration

        349
      • 27.5.3 Reset to Factory Defaults

        350
    • 27.6 Restart

      351
    • 27.7 Using FTP or TFTP to Back Up Configuration

      351
      • 27.7.1 Using the FTP Commands to Back Up Configuration

        351
      • 27.7.2 FTP Command Configuration Backup Example

        352
      • 27.7.3 Configuration Backup Using GUI-based FTP Clients

        352
      • 27.7.4 Backup Configuration Using TFTP

        352
      • 27.7.5 TFTP Command Configuration Backup Example

        353
      • 27.7.6 Configuration Backup Using GUI-based TFTP Clients

        353
    • 27.8 Using FTP or TFTP to Restore Configuration

      354
      • 27.8.1 Restore Using FTP Session Example

        354
    • 27.9 FTP and TFTP Firmware and Configuration File Uploads

      354
      • 27.9.1 FTP File Upload Command from the DOS Prompt Example

        355
      • 27.9.2 FTP Session Example of Firmware File Upload

        355
      • 27.9.3 TFTP File Upload

        355
      • 27.9.4 TFTP Upload Command Example

        356
  • Diagnostic

    357
    • 28.1 General Diagnostic

      357
    • 28.2 DSL Line Diagnostic

      357
  • Troubleshooting

    361
    • 29.1 Power, Hardware Connections, and LEDs

      361
    • 29.2 ZyXEL Device Access and Login

      362
    • 29.3 Internet Access

      364
    • 29.4 Phone Calls and VoIP

      365
    • 29.5 Problems With Multiple SIP Accounts

      366
      • 29.5.1 Outgoing Calls

        366
      • 29.5.2 Incoming Calls

        367
• Appendices and Index

  369
  • Product Specifications

    371
  • Setting up Your Computer’s IP Address

    381
  • Pop-up Windows, JavaScripts and Java Permissions

    393
  • IP Addresses and Subnetting

    399
  • Wireless LANs

    407
  • Services

    417
  • Command Interpreter

    421
  • Internal SPTGEN

    425
  • Legal Information

    449
  • Customer Support

    453
  • Index

    457